Agent Toolkit for AWS before agents get the keys
AWS shipped the Agent Toolkit, which gives coding agents skills, live docs and an MCP server. The part I care about is the guardrails: IAM condition keys that mark agent calls, and CloudTrail records of what the agent did. Set those up before an agent gets near a client account.